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The invention is described in the following statement: 



A METHOD AND APPARATUS FOR PRODUCING INFORMATION REGARDING 

THE OPERATION OF A SYSTEM 

Technical Field 

This invention relates . to a method and apparatus. for 
producing information regarding the operation of a system. 

Background to the Invention • 

In a system, such as a networked computer system or a 
communications system, various entities are connected to a 
network. Communication paths between the entities can be 
established across the network. If problems occur with 
the network, such . as failure of network infrastructure 
equipment, or overloading of -the network, then this can 
cause degradation or loss of communication between 
entities communicating across the network. This can be 
costly for businesses who rely on these networks for the 
conduct of their day to day business. It is important 
that such problems are avoided, or rectified as quickly as 
possible. 

An illustrative example of the above described 
problem arises in the operation of an IP telephony system. 
In an IP telephony system, TCP/IP enabled telephones are 
connected to a network. The network utilised can be an 
existing LAN which is already used, for other tasks, such 
as networking. a group of computers. This' means that a . 
telephone system can be installed in a premises that has a 
pre-existing network, and the telephones are configured to 
operate over the existing network. This allows a 
telephone system to be installed requiring significantly 
less wiring than a . traditional telephone system, which 
requires wiring to be installed for the sole purpose of 
connecting the telephones to a local telephone exchange 
such as a PABX. 

In an IP telephony system, calls made between 
telephones connected to the same LAN are established as 
communication paths between the telephones across the LAN. 
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These communications paths are established by a system 
controller which controls operation of the system. This 
controller is typically in the. form of a file server 
computer connected to the network. If a call is required 
5 to be made to a telephone not connected to the LAN, then 
the communication path may be routed across a WAN, or may 
be made via a gateway which establishes a connection to a 
traditional, telephone network; such as. a Public Switched 
Telephone Network ("PSTN"). 

10 In a traditional telephone system, the originating 

telephone and the answering telephone remain connected by 
a permanent circuit for the duration of the call. The 
data transmission capability of the circuit is sufficient 
to carry a voice signal at an acceptable call quality. In 

15 contrast, during a telephone call in an IP telephony 

system,, there exists no direct circuit connection between 
the originating and answering telephones. In the case of 
two telephones connected to the same network, the voice 
signal is encoded into data packets by one of the IP 

2 0 enabled telephones which are then transmitted across the 
' network to the other telephone. The other telephone, 
unencodes the received packets to reproduce the voice 
signal- for the listener. This. is a two way process to 
allow both call participants to speak and listen 

25 simultaneously. 

In the case where the call is routed through a 
gateway to a PSTN, the data packets are transferred to or 
from. the circuit switched PSTN by the gateway, which acts 
as an interface between the two systems. 

30 The data packets, originating, from either a gateway 

or an IP telephone, share the network with other data 
. packets being sent and received by other entities 
connected to the network. These other entities can 
include other IP telephones , personal computers and other 

35 networked devices. During times of heavy network traffic, 
the packets sent and received by IP telephones may be held 
up due to bottlenecks caused by the overall level of 

P4B818 



# 

1 . 

network traffic. This can result in a depletion of the 
performance of the IP telephony system such as a drop in 
call quality experienced by the user, long delays in 
obtaining a dial tone, and even the dropping but of calls 
5 in progress. This disruption to the telephone service can 
be very costly in business. It is also frustrating to 
users who have come to .expect trouble free telephone 
operation from traditional telephone systems . 

Disruption to the system is similarly caused by 

10 delays in operation of the system controller. This could 
be due to various causes including a heavy demand <?n the 
controller, or that the controller has inadequate 
processing capacity to pope with normal demand. 

Managing a networked system goes some way to 

15 avoiding, or assisting speedy resolution of, problems that 
occur with the system. These systems have been managed by 
reviewing activity logs created by entities connected to 
the network. However, these activity logs only give an 
indication of past operational activity and hence their 

20 , usefulness in timely management of the network is limited. 

Summary of the Invention 

In a first aspect the "present invention provides a 
method of producing operational information regarding the 

25 operation of a system, the system including a controller 
which assists to establish a communication path between 
entities connected to a network, the method including the 
step of: combining system configuration information 
regarding the configuration of the system with system 

3 0 activity information regarding activity, of the system to 
obtain the operational information. 

By this method, near real-time information regarding 
the operation of the system is produced. This information 
can inform a system administrator of the current 

35 operational conditions of the system to allow them to take 
appropriate remedial action, if needed. 
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In a second aspect the present invention provides a 
method of controlling the operation of a system, the 
system including a controller which assists to establish a 
. communication path between entities connected to a 
5 network, the method including the step of: obtaining 
system configuration- information regarding the 
configuration of the system, obtaining system activity 
information regarding activity of the system; combining 
the system configuration information with the system 
10 activity information to obtain the operational 

information; and controlling the system based on the 
operational information. 

In a third aspect the present invention provides an 
15 apparatus, for producing operational information regarding 
the operation of a system, the system including a 
controller which assists to establish .a communication path 
between entities connected to the network, the apparatus 
being arranged to "combine system configuration information 
2 0 regarding the configuration of the system with system 

activity information regarding activity of the system to 
obtain the operational information. 

In a fourth aspect the present invention provides a 

2 5 .computer program arranged to instruct a computing system 

to. conduct a method in accordance with either the first or 
second aspects of the invention. 

In a fifth aspect the present invention provides a 

3 0 computer program arranged to instruct a computer system to 

operate in accordance with the third aspect of the 
invention. 

In a sixth aspect the present invention provides a 
3 5 computer readable medium carrying a software program 

according to either the fourth or fifth aspects of the 
invention. 
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System configuration information includes information 
about the configuration of the system. . This includes 
information about the topology of the system, such as the 
identity of devices connected by the network and whether 
they are presently connected to the network, how they are 
connected to the network and their addresses on the 
network. It also includes information, about how the 
system should react to particular conditions, such as 
routing of traffic on the network. t 

System activity information includes information 
about activity of the system. This includes information 
obtained from use of devices connected to the system that 
requires them to communicate by way of the network. 

Brief Description of the Drawings 

An embodiment of the present invention- will now be 
described, by way of example only, with reference to the 
accompanying drawings, in which:* 

Figure 1 is a schematic view of a known IP telephony 
system; 

Figure 2 is a schematic view of the IP telephony 
system of figure 1 modified to include an apparatus 
according to an embodiment of the present invention; and 

Figure 3 is a schematic overview of a method 
according to an embodiment of the invention. 

Detailed Description of the Preferred Embodiment 

Referring to Figure 1, a known IP telephony system is 
shown. The system includes a collection of entities 
connected to a network in the form of LAN 12. The 
entities include multi -media devices including IP 
telephones 14,16 and gateway 18. The gateway could be 
either of an H.32 3 or MGCP gateway. The multi -media 
devices are the end points within the call system that 
actually perform the input/output operation on voice and 
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video media. 

The system further includes a controller in the form 
of system controller 20. System controller 20 is the 
central processing unit of IP telephony network 10. It is 
5 embodied as a network file server computer running 

suitably configured software . Depending upon the size of 
the system, a cluster of computers may be used. System 
controller 20 includes a data repository which holds 
system configuration information regarding IP telephony 

10 system 10. The data repository includes details of the 
topology of the network, information that informs system 
controller 20 how to process telephone calls made by use 
of the system 10 by establishing connections between the 
multi media devices. It further includes details of 

15 whether a physical multi-media device has actually been- 
installed to handle calls for a particular telephone 
. extension number. Depending upon the size and 
geographical distribution of system 10 there may be more 
than one system controller 20. 

20 Telephone calls are established via signalling that ' 

runs across LAN 12. For instance, if the receiver of IP 
telephone 14 is lifted then a signal is sent by IP 
telephone to system controller 20 indicating that the 
receiver has been lifted. System controller 20 operates 

25 to provide a dial tone to IP telephone 14 to indicate to 
, the user that they may place a call. Digits pressed on IP 
phone 14 to dial a number are individually processed by 
system controller 20. The system configuration 
information includes routing information that instructs 

30 system controller 20 how to route a call, based on. the 
digits dialled. If the user dials the number that 
identifies IP telephone 16 then system controller 
establishes a communication path between IP telephones 14 
and 16. If the number dialled relates to a destination 

3 5 device not connected to the LAN 12, system controller 2 0 
routes the call via gateway 18 which interfaces with 
* another telephone system. 



P48818 



Referring to figure 2, the system of Figure 1 is 
• shown modified to include an apparatus iri accordance with 
an embodiment of the invention. System controller 20 runs 
a Network Monitoring Driver (NMD) 22 that intercepts each 
5 signalling packet' that enters and exits the node and a . 
Network Monitoring Process (NMP) 24 that filters the 
packets and synthesises system activity information 2 7 
which includes call . signalling data from mult i -media 
devices such. as IP phones and gateways. The . system 
10 activity information- is sent to file server computer 25 
which is connected to LAN 12 and is running a software 
program 26. 

Referring to Figure 3, an overview of the operation 
of the software program 26 is shown. Software program 26 

15 receives system configuration information 29 from a data 
repository of system controller 20. The system 
configuration information 29 is received upon 
initialisation of the software program 26. The. system 
configuration information 29 remains constant during 

20 operation of system 10 until the configuration of system 

10 is altered such as by the addition or removal of multi- 
media devices. Updated system configuration information 
is obtained by software program 2 6 to allow for changes in 
the configuration of system 10. 

25 Software program 26 further receives system activity 

information 27 from network monitoring process 24. The 
system activity information 27 reflects activity in system 
10 and is sent to the software program 2 6 whenever 
activity occurs. The system configuration information 29 

30 and the system activity information 27 are combined by the 
.software .program 26 to obtain operational information, 
which can be made available to a user or system 
administrator. 7 

Software program 2 6 also receives entity status 

35 information by interrogating multi media devices in the 
form of IP telephones 14 , 16 and gateway 18. The system 
' configuration information 29 and the system activity 
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information 27 are used to determine the address of the 
• device to interrogate . 

. Network Monitoring w 
5 There are three main groups of- system activity 

information 27 provided by the network monitoring process 
24: 

• Signalling Path Information 

• Media Path Information 

10 • Multi-media Device Status Information 

Signalling Path Information 

- Whenever a call attempt is made from a device a 
signalling connection in some sense is created between the 

15 -device and the relevant system controller 20. The NMP 
detects any new call attempts and creates a call leg 
object to represent the lifetime of the call from the 
originating end. Similarly whenever a device answers a 
call a signalling connection is created between it and the 

20 system controller 20 and the NMP creates a call leg object 
to represent the lifetime of the call from the answering' 
end. 

% IP phones and gateways use several different 
signalling standards (otherwise known as protocols) to 
25 communicate with the system controller 20. IP phones use 
the SCCP protocol and gateways use the MGCP and H.3 23 
protocols. The NMI? parses these protocols and from them 
obtains the following call leg information: 

• Device Name (protocol dependant) 
30 • Device IP Address 

• Call Reference Number 

• Calling Party Number 

• Called Party Number 

3 5 Media Path Information 

From the device signalling the following information 
is obtained about the media path: 
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• Voice Compression Standard 

• RTP IP addresses and ports 

This information is stored in the call leg object that was 
created for the call attempt, . 
■5 * 
Multi-media Device Status Infonnation 

From the device signalling the following information is 
obtained about the status of the multi-media device: 

• Registration Failure Cause 
10 ' • Off-Hook Count 

• On-Hook Count 

• Delay-To-Dial-Tone 

Interrogation of -Multi Media Devices 

15. The multi media devices connected to LAN 12 contain 

entity status information 3 0 that can be obtained by 
interrogating the particular device, and receiving a 
response from the device. Examples of Multi-media Device 
data sources are: 

2 0 • HTML Pages from- IP phones 

• SNMP MIB accesses from gateways 

The entity status information 30 that can be obtained 
from direct interrogation of multi-media devices includes: 
25 • List of interfaces 

• Interface types (FXO, FXS,. E&M, PRI , CAS) 

• Interface status (Up/Down) 

• Voice Compression Standards 

• Quality of Service Parameters 

3 0 • Software version 

Output Data Streams 

Software program 26 combines the system configuration 
information2 9 and the system activity information 2 7 and 
3 5 sometimes further combines the entity status information 
3 0 to produce operational information including 
information pertaining to call legs 32, calls 34, devices 
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36, quality of service 38 and route availability 40.. 
Call Legs 

The call leg objects created by the NMP are matched 
5 to the device that . created the call leg by directly 

indexing off the device name or comparing the IP address 
that the call leg was* sourced from to the IP addresses of 
the. devices according to the system configuration 
information 29. The operational information produced 
10 includes: 

• Device Name 

. •" Device IP Address 

• Device RTP IP Address 

• Device RTP UDP Port 

15 • Destination RP IP- Address 

• Destination RTP UDP Port 

• Call Reference 

• Called Party Number 

• Calling Party Number 

2 0 • Call Type (Answering/Originating) 

- • Call Start Time 

• Call Duration 

• Voice Compression Standard 

• Protocol Type (SCCP/MGCP/H . 3 23 ) 

25 

Calls 

' A call is said to exist when two call legs with 
matching RTP IP addresses and ports are identified, 
indicating that, two multi -media devices have exchanged 

3 0 information that allows them to. transport voice and/or 

video information to each other. It is possible to obtain 
information on all of the calls present within the packet 
switched network at any given time and on any given multi 
media device. The information produced includes: 
35 • Call Reference 

• Originating Device Name 

• Answering Device .Name 
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• " Called Party Number 

• Calling Party Number 

• Call Start Time 

• Call Stdp Time 

5 • Call Direction . (Incoming/Outgoing/ Internal /Trunked) 

Devices 

-In order to render the information about current 
calls meaningful a list of multi-media devices , that can be 

10 called is required. By combining the system configuration 
information 29 obtained from the system controller 20 with 
the entity status information 30 obtained from 
interrogating the devices and the system activity 
information 2 7 the following device information can be 

15 provided: * . 

• Device Name 

• Device Type 

• Protocol Type 

• IP Address 

2 0 • Device Description 

• Slot Number 

• Subunit Number 

• Port . Number 

• Channel Number (only relevant for bearer channels within 
25 PRI and CAS spans) 

• Status (Up/Down) 

• Voice Interface Card Name 

• Delay- to -dial. -tone 

30 .Route Availability „ 

It is highly desirable to determine the availability 
of service within the packet switched network. This is 
most effectively done by calculating the availability for 
various patterns of phone numbers,, otherwise known as 

35 route patterns. High availability means that nearly all 
of. the devices assigned to route calls matching that 
pattern are operational; low availability means that few 
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of the devices assigned to route calls matching that 
pattern are operational. 

The system configuration information 29 includes 
details of the rules the system uses for routing calls. by 
5 the called party number. By combining this information 

with the entity status information 3 0 by cross checking, a. 
list of route patterns and their availability is produced. 
The information produced includes: 

• Route Pattern 

10 • Destination Name 

• Type (MGCP Gateway/MGCP Endpoint/H. 323 Gateway/Route 
List) 

• Status (Up/Down) 

15 Quality of Service 

Quality of Service parameters and Voice Compression 
Standard figures for a particular call in progress are 
obtained by interrogating the multi-media devices involved 
in the call- These devices are identified by the 

20 information produced in relation to calls as described 

above. Quality of service is calculated to ITU G-107 or 
P . 862 standards . 

In certain instances, a monitoring device may be 
employed to monitor the quality of service experienced by 

25 a particular mult i -media device. In this case, the 
-monitoring device, may be interrogated to determine 
information relating to quality of service. 

The operational information output by software 
30 program 26 can be presented graphically on a display 

screen. Alternatively, the system can be configured to 
send an alert message to a system administrator if a 
particular element of the operational information crosses 
a pre -determined threshold. For instance, if call quality 
35 drops below a set level the system administrator may be 
alerted to take action to rectify the situation. Still 
further, action may be taken automatically based on the 
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operational informatipn to control operation of the 
system. 

The method of the invention is particularly suitable 
5 /. for providing operational information . regarding the IP 

telephony system produced by Cisco Systems and sold under 
the. trade "name CallManager. 

Whilst this invention has been described by reference 
to an IP telephony system it has application to other 
10 ' systems where a 'connection between entities is established 
across a network. 

Whilst the software program 26 has been described 
above as running on its own : dedicated networked computer, 
it could run on a computer that forms part of system 
15 controller 20 . 

Any reference to prior art contained herein is not to 
be taken as an admission that the information is common 
general knowledge, * unless otherwise indicated. 

Finally,, it is to.be appreciated that various 
20 alterations or* additions may be made to the parts 

previously described without departing from the spirit or 
ambit of the present invention. 

Glossary of Acronyms 

.25 El: A European standard for a digital connection between 
customer premises equipment and the local exchange. The 
El bit rate is 2.048 Mbit/s. 

FXO: Foreign Exchange Office. This, is U.S. terminology' 
for the exchange end of an analogue telephone line. 
30 FXS : Foreign Exchange Station. This is U.S. terminology 
for the subscriber end of an analogue telephone line. 
H.323: . ITU Standard for packet switched multi-media 

calls. 

IP: Internet Protocol. Part of the TCP/IP protocol 
35 suite. 

ISDN: Integrated Services Digital Network. 
. LAN: Local Area Network. 
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MGCP: Media Gateway Control Protocol. 

MIS : Management Information Base. This is an abstract 

database resident within a managed network node that is 

accessed via SNMP. 
5 NMD": Network Monitoring Driver. 
~NMP: " Network Monitoring Process. % 

PRI : Primary Rate ISDN. This is an ISDN connection that 

is maintained over an El or a Tl span. 

PSTN: Public. Switched Telephone Network. 
10 Q.931: ITU Standard for telephony signalling. This 

was originally designed for ISDN signalling but has been 

extended for use in H.323 packet switched calls. 

RTP: Real-time Transport Protocol. A protocol used to 

transmit voice information on a packet switched network! 
15 SCCP: Skinny Client > Control Protocol. 

SNMP: Simple Network Management Protocol. 

Tl : A U.S. standard for a digital connection between 

customer premises equipment and the 'local exchange. The 

Tl bit rate is 1.544 Mbit/s. 
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THE CLAIMS DEFINING THE INVENTION , ARE AS FOLLOWS: 

1.. A method of producing operational information 

regarding the operation of a system, the system 
5 . including.; a controller which assists to establish a 

communication path. between entities connected to a 
network, the method including the steps of: 
combining system configuration information regarding 
the configuration of the system with . system .activity 

10 inf ormation regarding activity of the system to 

obtain the operational information. 
2. A method according to claim 1 wherein the system 
configuration information includes details of the 
topology of the system. 

15 3. A method according to either claim 1 or claim 2 
wherein the system configuration information is 
obtained from the controller. 

4. A method according to any preceding claim wherein the 
system activity information is obtained by monitoring 

.20 network traffic. 

5. A method according to claim 4 wherein the network 
traffic monitored is that addressed to or from the 
controller. . ■ 

6. A method according to claim 5 wherein the network 
25 traffic is monitored at a node of the network which 

connects the controller to the network. 

7 . A method according to any preceding claim wherein 

. entity status information is further combined with 
the system configuration information and the system 
30 activity information to produce the operational 

information. 

8. A method according to claim 7 wherein the entity 
status information is obtained by interrogating an 
entity connected to the network. 

35 9. A method according to claim 8 wherein the address of 
the interrogated entity is obtained from the system 
activity information. 
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10. A method according to any preceding claim wherein the 
•• system is. a multi-media cpmmunications system. 

11. A method according to any preceding claim wherein^ the 
- >. system is an IP telephony system. 

5 12 . A method according to any preceding claim wherein the 
entities include multi-media devices. 

13. . A method according to any preceding claim wherein the 

entities include IP telephones or gateways. 

14 . A method of controlling the operation of a system, 
10 the system including a controller which assists to 

establish a communication path between entities 
connected to a network, the method including the step 
of: obtaining system configuration information 
regarding the configuration of the system, obtaining 

15 ~ system activity information regarding activity of the 

. system; combining. the system configuration 

information with the system activity information to 
obtain the operational information; and controlling 
the system based on the operational information. 

20 15. An apparatus for producing operational information 
regarding the operation of a system, the system 
including a controller which assists to establish a 
communication path between entities connected to the 
network, the apparatus being arranged, to combine 

25 system configuration information regarding the 

configuration of the system with system activity 
information regarding activity of the system to. 
obtain the operational information. 

16. An apparatus according to claim 15 which is arranged 
3 0 to obtain the system configuration information from 

the- controller. 

17. An apparatus according to either claim 15 or claim 16 
which, is arranged to obtain the system activity 
information by monitoring network traffic. 

35 18. An apparatus according to claim 17 arranged to 

monitor the network traffic that is addressed to or 
from the controller. 
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19. An apparatus according to claim 18 which is arranged 
to monitor the network traffic at a node of the 
network which connects the controller to the network. 
• 20. An apparatus according to any one of claims 15 to i9 
5 arranged to further combine entity status information 

with the system configuration information and the 
system activity information to produce the 
operational information. 

21. . An apparatus according to claim 2 0 arranged to obtain 
10 the, entity status information by interrogating an 

entity connected to the network. 

22. A computer program arranged to instruct a computing 
system* to conduct a method in accordance with any one 
of claims 1 to 14 . 

15 23. A computer program arranged to instruct a computer 
system to operate as an apparatus according to any 
one of claims 15 to 21. . 
24 . A computer readable medium carrying a computer 

program according to either claim 22 or claim 23. 

20 

Dated this 31st day of March 2003 ■ 
INTEGRATED RESEARCH PTY LTD 
By its Patent Attorneys 
GRIFFITH HACK 

25 
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